coke-on-sol[.]gate-cryptolist[.]com

The domain coke-on-sol.gate-cryptolist.com was registered on June 17, 2024 through Key-Systems GmbH and currently resolves to the IPv4 address 188.114.96.3. An HTTP request to the host returns a status code of 200, indicating that a web service is actively responding. The authoritative nameservers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, confirming that the domain is delegated to Cloudflare’s DNS infrastructure.

VirusTotal records show that 14 of 91 security scanners have flagged the domain as malicious, providing a moderate detection signal across multiple vendors. The domain is listed on one public security blocklist and is also blocked by the PhishDestroy mitigation service, reinforcing the view that it is being used for malicious purposes. No SSL certificate details, page title, or brand‑specific indicators were supplied, so the exact visual content of the site remains unverified.

The available evidence points to a credential‑harvesting operation that is still active as of the report date, July 29, 2026. Defenders should add the domain and its resolving IP address to outbound and inbound block lists, monitor Cloudflare‑associated name server activity for related sub‑domains, and ensure that web filtering solutions reference the latest threat intel feeds that include this indicator. Continuous re‑scanning of the host by sandbox and URL reputation services is advised to capture any payload evolution or changes in the served content.